We consider it our primary responsibility to protect the
confidentiality of the personal data you provide and to protect it from
unauthorized access. That's why we use utmost care and state-of-the-art
security standards to ensure maximum protection of your personal data.
As a private company, we are subject to the provisions of
the European General Data Protection Regulation (GDPR). We have taken technical
and organizational measures to ensure that the rules on data protection are
observed by both us and our external service providers.
Legislation requires that personal data be processed
lawfully, in good faith and in a manner that is reasonable for the data subject
("lawfulness, fairness, transparency"). To ensure this, we inform you
about the individual legal definitions that are also used in this privacy
1. Personal data
"Personal data" means any information relating
to an identified or identifiable natural person (hereinafter the "data
subject"); an identifiable natural person is one who can be identified,
directly or indirectly, in particular by reference to an identifier such as a
name, an identification number, location data, an online identifier or one or
more factors specific tothe physical ,
physiological, genetic, mental, economic, cultural or social identity of that
"Processing" means any operation or set of
operations which is performed on personal data or on sets of personal data, whether
or not by automated means, such as collection, recording, organisation, structuring,
storage, adaptation or alteration, retrieval, consultation, use, disclosure by
transmission, dissemination or otherwise making available, alignment or combination,
restriction, erasure or destruction.
3. Restriction of processing
"Restriction of processing" means the marking
of stored personal data with the aim of limiting their processing in the future.
"Profiling" means any form of automated
processing of personal data consisting of the use of personal data to evaluate
certain personal aspects relating to a natural person, in particular to analyse
or predict aspects concerning that natural person’s performance at work,
economic situation, health, personal preferences, interests, reliability,
behavior, location or movements.
"Pseudonymisation" means the processing of personal
data in such a manner that the personal data can no longer be attributed to a
specific data subject without the use of additional information, provided that
such additional information is kept separately and is subject to technical and
organisational measures to ensure that the personal data are not attributed to
an identified or identifiable natural person.
6. Filing system
"Filing system" means any structured set of personal
data which are accessible according to specific criteria, whether centralized,
decentralised or dispersed on a functional or geographical basis.
"Controller” means the natural or legal person,
public authority, agency or other body which, alone or jointly with others, determines
the purposes and means of the processing of personal data; where the purposes
and means of such processing are determined by Union or Member State law, the
controller or the specific criteria for its nomination may be provided for by
Union or Member State law.
"Processor" means a natural or legal person,
public authority, agency or other body which processes personal data on behalf
of the controller.
"Recipient" means a natural or legal person,
public authority, agency or another body to which the personal data are
disclosed, whether a third party or not. However, public authorities which may
receive personal data in the framework of a particular inquiry in accordance
with Union or Member State law shall not be regarded as recipients; the
processing of those data by those public authorities shall be in compliance
with the applicable data protection rules according to the purposes of the
10. Third party
"Third party" means a natural or legal person,
public authority, agency or body other than the data subject, controller, processor
and persons who, under the direct authority of the controller or processor, are
authorised to process personal data.
"Consent" of the data subject means any freely
given, specific, informed and unambiguous indication of the data subject’s
wishes by which he or she, by a statement or by a clear affirmative action,
signifies agreement to the processing of personal data relating to him or her.
§3 Lawfulness of
Processing of personal data shall be lawful only if is if
there is a legal basis for processing. Legal basis for the processing may, in
accordance with Article 6 (1) lit. a - f GDPR in particular be:
(a) the data subject has given consent to the processing of
his or her personal data for one or more specific purposes;
(b) the processing is necessary for the performance of a
contract to which the data subject is party or in order to take steps at the
request of the data subject prior to entering into a contract;
(c) the processing is necessary for compliance with a
legal obligation to which the controller is subject;
(d) the processing is necessary in order to protect the
vital interests of the data subject or of another natural person;
(e) the processing is necessary for the performance of a
task carried out in the public interest or in the exercise of official
authority vested in the controller;
(f) the processing is necessary for the purposes of the
legitimate interests pursued by the controller or by a third party, except
where such interests are overridden by
the interests or fundamental rights and freedoms of the data subject which
require protection of personal data, in particular where the data subject is a
about the collection of personal data
(1) Below we inform you about the collection of personal
data when using our website. Personal data are e.g. name, address, e-mail
addresses and user behavior.
(2) When contacting us by e-mail or using a contact form,
the information you provide (your e-mail address, your name and telephone
number, if applicable) will be stored by us to answer your questions. We will delete
this data after the storage is no longer necessary or the processing will be
restricted, if legal archiving obligations apply.
§5 Collection of
personal data while visiting our website
In the case of a merely informative use of the website, i.e.
if you do not register or otherwise provide us with information, we only
collect the personal data that your browser transmits to our server. If you
wish to view our website, we collect the following data, which is technically
necessary for us to give you relevant information about our website and to
ensure its stability and security (legal basis is Art. 6 (1)lit. f GDPR):
1. IP address
2. Date and time of the request
3. Time zone difference to Greenwich Mean Time (GMT)
4. Content of the request (precise page)
5. Access Status / HTTP Status Code
6. Each transmitted amount of data
7. Website from which the request comes from
9. Operating system and its user interface
10. Language and version of the browser software.
(1) In addition to the aforementioned data, Cookies are
stored on your computer when using our website. Cookies are small text files
that are stored on your hard drive, assigned to the browser you are using, and
provides certain information to the body that sets the cookie. Cookies cannot
run programs or transmit viruses to your computer. They serve to make the website
overall more user-friendly and effective.
(2) This website uses the following types of cookies, the
scope and operation of which are explained below:
1. Transient cookies (see a.)
2. Persistent cookies (see b.)
a. Transient cookies are automatically deleted when you
close the browser. These include in particular the session cookies. These store
a so-called session ID, with which various requests from your browser can be
assigned to the common session. This will allow your computer to be recognized
when you return to our website. The session cookies are deleted when you log
out or close the browser.
b. Persistent cookies are automatically deleted after a
specified period, which may vary depending on the cookie. You may delete the
cookies in the security settings of your browser at any time.
c. You may configure your browser settings according to
your wishes. You may decline the acceptance of third-party cookies or all
cookies. So-called "third party cookies" are cookies that have been
set by a third party, and therefore not by the actual website which you are
currently visiting. Please note that disabling cookies may not allow you to use
all features of this website.
d. We also give our users the option of selecting which
cookies they want to allow. In part, the cookies are used for security reasons or
to operate our online offer (e.g. for the presentation of the website) or to save
the user decision regarding a pop-up confirmation, and by doing so save the
decision for or against certain cookies in the first place. In addition, we or
Our users can decline the use for marketing purposes in the pop-up (query when
opening the website for the first time).
online marketing purposes can be declared on a variety of services, especially
in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/ . Furthermore, the storage of
cookies can be achieved by switching them off in the settings of the browser.
Please note that by doing so, not all features of this online offer may be
f. If users do not want cookies to be stored for marketing
or other purposes, they may include these preferences in the pop-up when
opening the website. This means that advertising-relevant cookies are no longer
g. If users generally do not want any cookies stored on
their computer, they are kindly asked to disable the corresponding option in
their browser's system settings. Saved cookies may be deleted in the system
settings of the browser. The disabling of cookies may lead to functional
restrictions of this online offer.
functions and offers of our website
(1) In addition to the purely informational use of our
website, we offer various services that you may use if you are interested. To
do this, you will usually need to provide further personal data that we use to
provide the service and for which the aforementioned data processing principles
(2) We partially use external service providers to
process your personal data. These processors have been carefully selected and instructed
by us, are bound by our directions and guidance and are regularly monitored.
(3) Furthermore, we may disclose your personal data to
third parties, if special offer participations, competitions, contracts or
similar services are offered by us together with partners. You will receive
more detailed information, when you provide your personal data or below in the
description of the offer.
(4) Insofar as our service providers or partners are
based in a country outside of the European Economic Area (EEA), we inform you
about the consequences of this
circumstance in the description of the offer.
§8 Use of our
(1) If you want to use our academy, you will need a
customer account to log in with your email address and password to see your
progress and ask questions in our forum. Mandatory information necessary for
the execution of the contracts is specially marked, further details are
voluntary. The use of the academy is free of charge, any additional offers that
are subject to a charge are stated separately. Unless otherwise stated in the
offer, access to these additional offers is made via the Academy (together with
the free offers there).
(2) We store your access data to the Academy basically indefinitely,
as you also have indefinite access to the contents of the Academy and the
forum, as well as access to any additional offers purchased. If you wish to
delete your customer account and all your information, please contact us and we
will do it.
(3) In order to prevent unauthorized access to your
personal data by third parties, these data are encrypted using SSL technology.
§9 Purchase of
(1) The products on our website are linked to the vendor
digistore24.com (Digistore24 GmbH, St.-Godehard-Strasse 32, 31139 Hildesheim,
Germany). DigiStore24 is the vendor of the products, we are the product producer.
We do not operate an own webshop and we also use payment service providers.
(1) With your consent, you can subscribe to our
newsletter, which informs you about our current interesting offers. The
advertised goods and services are named in the declaration of consent.
(2) To register for our newsletter, we use the so-called
double opt-in procedure. This means that after you have registered, we will
send you an e-mail to the e-mail address provided, in which we ask you to
confirm that you wish to receive the newsletter. If you do not confirm your
registration, your information will be blocked and automatically deleted after
one month. In addition, we store your IP addresses and times of registration
and confirmation. The purpose of the procedure is to prove your registration
and, if necessary, to clarify a possible misuse of your personal data.
(3) The only requirement for sending the newsletter is
your e-mail address. The entry of additional, separately marked data is
voluntary and will be used to address you personally. After your confirmation,
we will save your e-mail address for the purpose of sending you the newsletter.
The legal basis is Art. 6 para. 1 lit. a GDPR.
(4) You can revoke your consent to the sending of the
newsletter at any time and unsubscribe from the newsletter. You can declare the
cancellation by clicking on the link provided in each newsletter e-mail, via this form on
, by e-mail to email@example.com or by sending a message to the
contact details provided in the imprint.
(5) We would like to point out that we analyse your user
behavior when sending the newsletter. For this analysis, the emails sent
include so-called web beacons or tracking pixels that represent one-pixel image
files stored on our website. For the analyses, we link the data mentioned in §5
and the web beacons with your e-mail address and an individual ID. The data are
collected exclusively pseudonymised, therefore the IDs are not linked to your
other personal data, a direct personal reference is barred. You can object to
this tracking at any time by clicking on the separate link provided in each e-mail
or informing us via another contact path. The information is stored as long as
you are subscribed to the newsletter. After unsubscribing, we store the data
purely statistically and anonymously.
As a matter of principle, our offer is for adults only.
Persons under the age of 18 should not submit any personal data to us without
the consent of their parents or guardians.
§12 Rights of the data
(1) Revocation of
If the processing of the personal data is based on a given
consent, you have the right to revoke the consent at any time. The revocation
of consent does not affect the legality of the processing carried out on the
basis of the consent until the revocation.
For the exercise of the right of revocation, you may
always contact us.
(2) Right to
You have the right to ask the controller to confirm whether
we are processing personal data concerning you. You can request confirmation at
any time using the contact details above.
(3) Right of
(1) If personal data is processed, you can request
information about this personal data and the following information at any time:
a. the purposes of the processing;
b. the categories of personal data which are processed;
c. the recipients or categories of recipients to whom the
personal data have been or will be disclosed, in particular recipients in third
countries or international organizations;
d. where possible, the envisaged period for which the
personal data will be stored, or, if not possible, the criteria used to
determine that period;
e. the existence of the right to request from the
controller rectification or erasure of personal data or restriction of
processing of personal data concerning the data subject or the right to object
to such processing;
f. the right to lodge a complaint with a supervisory
g. where the personal data are not collected from the
data subject, all available information as to their source;
h. the existence of automated decision-making, including
profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those
cases, meaningful information about the logic involved as well as the
significance and the envisaged consequences of such processing for the data
(2) Where personal data are transferred to a third country
or to an international organisation, you have the right to be informed of the
appropriate safeguards pursuant to Article 46 of the GDPR relating to the
(3) We provide a copy of the personal data undergoing processing.
For any further copies that you request as data subject, we may charge a
reasonable fee based on the administrative costs. If you submit the application
by electronic means, and unless otherwise specified by you, the information
shall be provided in a commonly used electronic form.
(4) The right to receive a copy under paragraph 3 shall
not affect the rights and freedoms of others.
(4) Right to
You have the right to obtain from us, without undue
delay, the rectification of inaccurate personal data concerning you. Taking
into account the purposes of the processing, you shall have the right to have
incomplete personal data completed, including by means of providing a
(5) Right to erasure
("right to be forgotten")
You shall have the right to obtain from the controller
the erasure of personal data concerning you without undue delay and we shall
have the obligation to erase personal data without undue delay where one of the
following grounds applies:
a. The personal data are no longer necessary in relation
to the purposes for which they were collected or otherwise processed.
b. The data subject withdraws the consent on which the
processing is based, according to point (a) of Article 6 (1) or point (a) of Article
9 (2) GDPR, and where there is no other legal ground for the processing.
c. The data subject objects to the processing pursuant to
Article 21 (1) of the GDPR, and there are no overriding legitimate grounds for
processing, or the data subject objects to the processing pursuant to Article
21 (2) GDPR.
d. The personal data have been unlawfully processed.
e. The personal data have to be erased for compliance
with a legal obligation in Union or Member State law to which the controller is
f. The personal data have been collected in relation to offer
of information society services referred to in Article 8 (1) of the GDPR.
Where the controller has made the personal data public
and is obliged pursuant to paragraph 1 to erase the personal data, the
controller, taking account of available technology and the cost of implementation,
shall take reasonable steps, including technical measures, to inform
controllers which are processing the personal data that the data subject has
requested the erasure by such controllers of any links to, or copy or
replication of, those personal data.
The right to erasure ("right to be forgotten") shall
not apply to the extent that processing is necessary:
1.) for exercising the right of freedom of expression and
2.) for compliance with a legal obligation which requires
processing by Union or Member State law to which the controller is subject or for
the performance of a task carried out in the public interest or in the exercise
of official authority vested in the controller;
3.) for reasons of public interest in the area of public
health in accordance with points (h) and (i) of Article 9 (2) (h) as well as Article
9 (3) GDPR;
4.) for archival purposes in the public interest,
scientific or historical research purposes or statistical purposes in
accordance with Article 89 (1) GDPR, in so far as the right referred to in
paragraph 1 is likely to render impossible or seriously impair the achievement
of the objectives of that processing, or
5.) for the establishment, exercise or defence of legal
(6) Right to
restriction of processing
You have the right to request that we restrict the
processing of your personal data where one of the following applies:
a. the accuracy of the personal data is contested by the
data subject, for a period enabling the controller to verify the accuracy of
the personal data;
b. the processing is unlawful and the data subject opposes
the erasure of the personal data and requests the restriction of their use instead;
c. the controller no longer needs the personal data for
the purposes of the processing, but they are required by the data subject for
the establishment, exercise or defence of legal claims; or
d. the data subject has objected to processing pursuant
to Article 21 (1) of the GDPR, pending the verification whether the legitimate
grounds of the controller override those of the data subject.
Where processing has been restricted in accordance with
the above-mentioned conditions, such personal data shall, with the exception of
storage, only be processed with the data subject’s consent or for the establishment,
exercise or defence of legal claims or for the protection of the rights of
another natural or legal person or for reasons of important public interest of
the Union or of a Member State.
In order to exercise the right to restriction of
processing, the data subject may contact us at any time using the contact
details provided above.
(7) Right to data
You have the right to receive the Personal Data you have
provided to us in a structured, commonly used and machine-readable format, and
you have the right to transmit those data to another controller without
hindrance from the controller to which the personal data have been provided,
a. the processing is based on a consent pursuant to
Article 6 (1) (a) or Article 9 (2) (a) or on a contract pursuant to Article 6
(1) (b) GDPR; and
b. the processing is carried out by automated means.
In exercising your right to data portability pursuant to paragraph
1 (above), you shall have the right to have the personal data transmitted
directly from one controller to another, where technically feasible. The
exercise of the right to data portability is without prejudice to the right of erasure
(the right to be forgotten). That right shall not apply to processing necessary
for the performance of a task carried out in the public interest or in the exercise
of official authority vested in the controller.
(8) Right to
You shall have the right to object, relating to your own
particular situation, at any time to processing of personal data relating to
you which is based on point (e) or (f) of Article 6 (1) of the GDPR; including
profiling based on those provisions. The controller shall no longer process the
personal data unless the controller demonstrates compelling legitimate grounds
for the processing which override the interests, rights and freedoms of the
data subject, or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing
purposes, you have the right to object at any time to processing of personal
data concerning you for such marketing, which includes profiling to the extent
that it is related to such direct marketing. If you object to processing for
direct marketing purposes, the personal data shall no longer be processed for such
In the context of the use of information society services,
and notwithstanding Directive 2002/58/EC, you may exercise your right to object
by automated means using technical specifications.
Where personal data are processed for scientific or
historical research purposes or statistical purposes pursuant to Article 89(1),
you, on grounds relating to your own particular situation, shall have the right
to object to processing of personal data concerning you, unless the processing
is necessary for the performance of a task carried out for reasons of public
The right of objection can be exercised at any time by
contacting the respective person responsible.
(9) Automated individual
decision-making, including profiling
You shall have the right not to be subject to a decision
based solely on automated processing - including profiling – which produces
legal effects concerning you or similarly significantly affects you. This does
not apply if the decision:
a) is necessary entering into, or performance of, a
contract between the data subject and a data controller,
b) is authorised by Union or Member State law to which
the controller is subject, and which also lays down suitable measures to
safeguard the data subject’s rights and freedoms and legitimate interests, or
c) is based on the data subject’s explicit consent.
The data controller shall implement suitable measures to
safeguard the data subject’s rights and freedoms and legitimate interests, at
least the right to obtain human intervention on the part of the controller, to
express his or her point of view and to contest the decision.
This right can be exercised by the data subject at any
time by addressing himself or herself to the relevant controller.
(10) Right to lodge
a complaint with a supervisory authority
Without prejudice to any other administrative or judicial
remedy, you shall have the right to lodge a complaint with a supervisory
authority, in particular in the Member State of your habitual residence, your
place of work or place of the alleged infringement, if you consider that the
processing of your personal data infringes this regulation.
(11) Right to an effective
Without prejudice to an available administrative or
extrajudicial remedy, including the right to complain to a supervisory
authority under Article 77 of the GDPR, you have the right to an effective
judicial remedy if, in your opinion, you consider that the rights conferred on
you by the GDPR are breached by the processing of your personal data that is
not in conformity with that regulation.
§13 Use of Google
(1) This website uses Google Analytics, a web analytics
service provided by Google LLC. ("Google"). Google Analytics uses
so-called "cookies", text files that are stored on your computer and
that allow an analysis of your use of the website. The information generated by
the cookie about your use of this website is usually transmitted to a Google
server in the USA and stored there. However, in the case of IP anonymization,
your IP address will be shortened by Google beforehand within member states of
the European Union or other parties to the Agreement on the European Economic
Area. Only if you expressly agree in the pop-up that we may store cookies for
marketing purposes, the full IP address will be sent to a Google server in the
US and used in this way. Mandated by the operator of this website, Google will
use this information to analyse your use of this website, to compile reports
about the website activities and provide further services in connection with
the website use and the internet use for the website operator.
(2) The IP address transmitted by Google Analytics will
not be merged with other Google data.
(3) You may prevent the storage of cookies by setting
your browser software accordingly; however, please note that if you do this,
you may not be able to use all the features of this website to the fullest
extent possible. You may also prevent the collection of the data by Google, generated
by the cookie and relating to your use of the website (including your IP
address) as well as the processing of this data by Google by downloading and
installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de .
(4) This website uses Google Analytics with the extension
"_anonymizeIp()". As a result, IP addresses are processed shortened,
a person-relatedness is barred. If the data collected about you is assigned any
personal reference, it will be immediately excluded and the personal data will
be deleted immediately.
(5) We use Google Analytics to analyze and regularly
improve the use of our website. With the statistics we can improve our offer
and make it more interesting for you as a user. For the exceptional cases in
which personal data is transferred to the US, Google has submitted to the EU-U.S.
and Swiss-U.S. Privacy Shield framework, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of
Google Analytics is Art. 6 (1)lit. f
(6) Third-party information: Google Dublin, Google
Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436
(7) This website also uses Google Analytics for a
cross-device analysis of visitor flows, which is carried out via a user ID. You
may disable the cross-device analysis of your usage in your customer account under
“My Data”, “Personal Information”.
§14 Use of social
(1) We are currently using the following social media
plug-ins: Facebook, Twitter, Instagram, YouTube. We use the so-called two-click
solution. In other words, when you visit our site, no personal data is
initially passed on to the providers of the plug-ins. The provider of the
plug-in can be identified by the marking on the box above its initial letter or
logo. We give you the opportunity to communicate directly with the provider of
the plug-in via the button. Only if you click on the marked field and activate
it, the plug-in provider receives the information that you have accessed the
corresponding website of our online service. Additionally, the data mentioned
in §5 of this notice will be transmitted. By activating the plug-in, personal
data of you will be transferred to the respective plug-in provider and stored
there (for US providers usually in the USA). Since the plug-in provider carries
out the data collection mainly via cookies, we recommend that you delete all
cookies via the security settings of your browser before clicking on the
(2) We have no influence on the data collected and the data
processing operations, nor are we aware of the full extent of the data
collection, the purpose of the processing, the storage periods. We also have no
information regarding erasure of the data collected by the plug-in provider.
(3) The plug-in provider saves the data collected about
you as usage profiles and uses these for purposes of advertising, market
research and / or tailor-made own website design. Such an analysis is carried
out in particular (also for non-logged-in users) for the presentation of
needs-based advertising and to inform other users of the social network about
your activities on our website. You have the right to object to the formation
of these user profiles, whereby you need to contact the respective plug-in
provider to exercise this right. Through the plug-ins we offer you the
opportunity to interact with the social networks and other users, so that we
can improve our offer and make it more interesting for you as a user. The legal
basis for the use of the plug-ins is Art. 6 para. 1 lit. f GDPR.
(4) The data transfer takes place regardless of whether
you have an account with the plug-in provider and are logged in there. If you
are logged into your account with the plug-in provider, your data collected
from us will be assigned directly to your existing account with the plug-in
provider. If you press the activated button and e.g., if you link the page, the
plug-in provider also stores this information in your user account and shares
it publicly with your contacts. We recommend logging out regularly after using
a social network, but especially before activating the button, as this will
prevent you from being assigned to your profile with the plug-in provider.
(5) For more information on the purpose and scope of the
data collection and its processing by the plug-in provider, please refer to the
privacy statements of these providers, whose links are shown below. There you
will also find further information about your rights and settings options for
the protection of your privacy.
(6) Addresses of the respective plug-in providers and URL
with their privacy notices:
After an EU court decision, Facebook has published an addendum,
that is compulsory for all fanpages operators. According to this addendum, we
and Facebook are Co-Controllers for the personal data. Requests from data
subjects are to be forwarded to Facebook (by us).
This means that you may continue to send all requests to us and
we will then, if appropriate, forward it to Facebook.
The following applies according to the addendum:
Facebook takes primary responsibility for the processing of
Insights data, according to GDPR and fulfills all duties and responsibilities
from the GDPR in regards to the processing of Insights data.
The exact wording of this addendum you may find here:
The data of data subjects will be collected and processed
b. Instagram LLC, is part of the Facebook group,
according to their privacy notice, if data subjects from Europe have questions,
they need to contact Facebook Ireland (relevant contact data is included in the
c. YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
We use external service providers (processors) e.g. for
the shipment of goods, newsletters or payment transactions. Separate processing
agreements have been concluded with the service providers to ensure the
protection of your personal data.
We work together with the following service providers:
During the purchase process, we link to DigiStore24. We
as product producer work together with this company for the handling of the
Address: Google LLC., 1600 Amphitheatre Parkway, Mountain
View, California 94043, USA